CVSS 3.0
7.5 highCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2017-8450
High (7.5) in elastic x-pack. EPSS 0.9% chance of exploitation in the next 30 days.
X-Pack 5.1.1 did not properly apply document and field level security to multi-search and multi-get requests so users without access to a document and/or field may have been able to access this information.
Severity
- EPSS
- 0.9% chance of exploitation in the next 30 days; higher than 58% of CVEs (scores of 2026-11-01)
- CWEs
- CWE-200, CWE-732
- Published
- Modified
- Record from
- the NVD, synced
Affected
- elastic:x-pack